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Why Redundancy Management At 
Fusion Workshop ? 


Redundancy Management Is Fault Detection, Isolation and Reconfiguration 


Meets Functional Requirement Using Outputs From Similar and Dissimilar Sensors 


Especially Relevant For Unpiloted Applications 
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Redundancy Management For 
Navigation Functions on X-33 


Representative Mission Trajectory 

Navigation Function Related Architecture 
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X-33 Objectives 


♦ Demonstrate Critical Technologies 
For Single Stage to Orbit Reusable 
Launch Vehicle 

• Propulsion 

• Thermal Dissipation 

• Autonomous Landing 
•Others 
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Representative Mission Trajectory 


MECO 
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Altitude vs Time 


Mission Phases* 

•Ascent 

•Transition (After Main 
Engine Cut Oft) 

-Entry - 

-Terminal Area Energy 

Management 

-Approach 


Terminal Area Ground Track vs Time 
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Role of Navigation Functions 


• Air Data 

Ascent - Gain Table Lookup, Load Alleviation 
Descent - Gain Table Lookup, Cross-channel Coupling 


• INS/GPS 

Ascent-Guidance (P,V,A) and Flight Control State Data (p,q,r, Attitude, lldg) 
Descent and Landing-G&C State Data 

Position wrt runway - differential GPS mode 


Radar Altimeter - Height Above Ground At Approach and Landing 
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Navigation Function Architecture 
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Dual Thresholds Catch ‘Catastrophic 
and Persistent Soft Faults 


Threshold Upper 


Single Crossing Takes 
System Out 


JVl a |> l>ve jof N ab(JV , above Takes 
System Out - M^ w of 
belt w bring it back in 
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Redundancy Management 
Output Data Focus 


Data Quality Management 

• INS/GPS 

* Air Data 


One Coherent Output from 
Each Subsystem 


• Once INS/GPS Chosen, 
System Is Used Until Faulty 
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Distance Metrics For % 2 Testing- AirData 


J = I j=allvaMports [(pest, - p, } 2 / Q c 2 ] / (Num_Val_Ports* Sigma_a_airdata J ) , ^ est Pressure estimates at ports 

from averaged airdata values 

One metric for each set of ports - Each tested against a threshold (=function of (Num_Val_Ports) 


[(VAX_BODY - yj! (c va , 
+ (VAY_BODY - Vg,,) 2 /(o, 
+ (VA2_BODY - V B2 ) 2 /(a va 


Test Air Data with Inertial System 


Air Data Derived 
Body Velocities 


INS Derived 
Body Velocities 
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System Air Data Quality Flow 


pressure 


inertial 

data 


INS Quality | 

Mgmt | t like testing 


Measured Air 
Data Sol’ns 


on pressure 


Derived Air 
Data Sol'n 


Threshold Tests 
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INS Fault Detection- Body Rates/Accels 


G jj= {(LATNAVj - LATNAVj ) + (LONGNAVj • LONGNAVj)]/ S!G_LC + (ALTNAV j - ALTNAVj r/SIG_HCT 

+ {(VELNAV_Xj - VEIN A V _X; ?+ (VELNAV_Y; - VELNAV_Y;) 2 J / StG.VHC 2 + (VELNAV_Zj - VELNAV_Z;) 2 /SIG_WC 2 


GPS Fault Detection/Isolation - Positions/Velocities 


INS Fault Isolation- Body Rates/Accels 


3 units => 3 pairwise differences (PD) => Threshold Comparisons => 2 PD with common unit => fault candidate 


SIG„ are a function of Mission Phase 
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GPS/INS Data Quality Management 


HAV Status 


GINS 

Poll 


Voting State 
Determination 


Vote 

Validity x3 


HAV Voting State 
(0,1,2,3) BIT Fails 

GINS 

f Vote Validity xi 


GPS/INS 

x3 
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INS/GFS Status 


Selection Active Data 
Filter \ 


Other Nav 
Processing 
Functions 


LOCKHKMD AST 


A m Tam ( ^^SllioclSiQfl3l 

A R R O K P A C F. 


SPOoodrich 

Aoroapac* 






Rocketdyne 




Date 






Fault Detection & Isolation (FDI) 


Voting State Determination 


Selection Filter 


States 

( 0 , 1 , 2 ) 


ting States (VS) 

( 3 ) 


Pairwise 

Difference 

Calculation 


Threshold Miscomnare ^ 
Comparison Flags 

(to. A) Faults 


Mission 

Phase 


Quality 

Check 


GINS Isolatioh No. (2 trip) 
Threshold Crossings (P,V) 


Fault 

Isolation 

2 T/H trips f T/ITtfig^? 


(P,V) 

Accumulator 


(to, A) 

Accumulator 


(to, A) Fault 
Analysis 


(P,V) Fault 
Analysis 


Selection Filter 
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Accumulator 



Lower 
T/H Cross 


Frame/Number 


Upper 
T/H Cross 


Miscompare Fla£s vs 2 T/H 


2 T/H trip data accumulation 


3 T/H trip data accumulation 


Lower 
T/H Cross 


Frame/Number 


Upper 
T/H Cross 


Accumulator 


1 T/H trip data accumulation 


Lower 
T/H Cross 
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Some Failures May Not Be 
Caught By INS BIT 


No Change In Data - 1553 Buffers Not Updated 
Step Errors 

Data Word OverFlow ( + to - Full Scale) 

Slow Ramping 
Erratic Noisy 
Lo Frequency Sine Wave 


Parameter 


Sine Wave 


Position (nm) 2.0 4.0 nra/br 

Velocity (ffs) 9.0 O.Olf/s/s 

Acceleration (ffs/s) 0.015 0.001 (f/s/s)/s 

Attitude (deg) 0.5 0.01(deg)/s 

Att Rate (deg/s) 0.01 0.001(deg/s)/s 

Ang Accel (deg/s/s) 0.001 0.0001(deg/s/s)/s 


4. # 84 min 

10. @ 84 min 

N/A 

N/A 

N/A 

N/A 
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Fault Analysis State Diagram 



Fault Analysis and Isolation State Diagram-(o), A) Faqlts 


2 T/H Trin 


> 0 Lower T/H Cross Over N3 frame; 


With subsequent Isolation 


Accumulator 

Results 


Tentative 


Healthy 


No Lower T/ H Cross Over N3 frames 1 


1 Upper T/H Cross With 
Subsequent Isolation/^ 


No Lower/Upper 
T/H Cross 
Over N4 frames 


1 Upper T/H Cross 
With subsequent isolation 


Selection 

Filter 


Greater Than or Equal M 
Lower T/H Crossings With 
Subsequent Isolation Over 
N3 frames 


Hazard 


Degraded 


One Transition State Diagram Per Bach GINS to, A pair 
One Transition State Diagram Per Each GINS P, V pair 
(6 total) 
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Fault Analysis 
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Acceleration/Body Rate Fault Analysis - GINS #3 
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Acceleratien/Body Rale Fault Analysis - GINS #2 


Fault Analysis 


:Accelerajion/Body iale Fault Analysis - GINS #1 
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i&QSixiQo/Vzlocily Fault Analysis - GINS #S 
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Posiaon/Vplocity Rate Fault Analysts - GINS #2 \ 
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PtwitonK’ elocky Fault Analysts - GINS # l 
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Selection Filter - 
Single Unit-Output Full Set 


Choose Best Unit 
Initially(al mission 
start). Stay With This 
Unit, Output Full Data 
Set 


H/W Healthy GINS # 

DQM Faulty GINS # 

(Faulty = Degraded, Hazard) 
Best Unit 


■►\Heakhy % 


Choose Best Unit 
Initially(at unit fail 
time). Stay With This 
Unit, Output Full Data 
Set 


Healthy > 


Time and CG 
Aligned GINS Data 


Aligned GINS Data 


Hard Fail N 
Only or Soft Fail 
Due to 

Reasonablenes y 
Checks / 


Choose Remaining Unit 
at fail time, Stay With 
This Unit, Output Full 
Data Set 


Healthy 1 


Hard Fail N 
Only or Soft Fail 
Due to 

Reasdnableftes 
Checks 


Use Best value(if 
available) of all Soft 
Failed Units. Output 
Full Data Set. 


Healthy % 


Output Soft Failed Unit Data Set 


Output Last 
Valid Data Set 
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Tuning Methodology 


Detailed Trajectory Simulation At Integrated Test Facility Used 


Errors Introduced Independently 

• Acceleration - 3 channels 

• Body Rates - 3 channels 
»: Position - 3 channels 

• Velocity - 3 channels 


Error Magnitude and Duration Varied 

• Not Landing Successfully - Upper Threshold Related 

• Not meeting Performance Goals - Lower Threshold 


Varied Over Time in Mission Phase and Mission Trajectory Type 
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